Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: NMrNu9Eh4CMZi1w6bqsXzKZUpqFHHxhRfmKTbQyO1Gs=
Subject key identifier: 21:71:78:74:9A:4A:20:E7:FF:0A:31:FE:00:39:30:6C:59:C2:F7:28
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01977D1F15CC1531D36789519FCFEA4A9C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0BF8
Signing time: Tue 17 Jun 2025 09:01:18 +0000
Manifest this update: Tue 17 Jun 2025 09:01:18 +0000
Manifest next update: Wed 18 Jun 2025 09:01:18 +0000
Files and hashes: 1: 5hJAv1vo3oOPqWjQpBgMDKDCfMU.roa (hash: NHMZ+Lo+WMMXDw4UrqXBzj/Re+R0/j7Wcu84BebYuQw=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: XRGJKmhr6NEo8fDW/mUdlC1J/ag1WB2nKT1/qz88otw=)
3: exkTmhIrPHXpMpwbJ39TJjbGGQU.roa (hash: O4LImE4gF0VDKL+p9YeHfP2uSXH0M3XtEyfG3rkFcvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1f:15:cc:15:31:d3:67:89:51:9f:cf:ea:4a:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jun 17 09:01:18 2025 GMT
Not After : Jun 18 09:01:18 2025 GMT
Subject: CN=217178749a4a20e7ff0a31fe0039306c59c2f728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:d1:d8:b8:3e:87:f4:8a:bd:b4:cd:d4:20:
b5:8f:a5:2c:98:b9:70:67:d4:97:0f:f7:73:58:c8:
8f:04:1c:ee:7e:37:b7:97:c9:7a:bd:7a:53:03:10:
33:33:72:d8:df:b0:b5:cc:74:5f:a7:c3:8c:b8:8f:
0f:68:5b:e9:2e:7e:51:71:a9:de:5f:ed:2b:1c:fe:
9b:1e:75:0c:56:bb:47:9d:2a:a1:1e:08:80:bc:f1:
b4:e8:1b:45:07:b1:3a:aa:dc:b8:b0:42:63:0b:47:
23:db:f6:bc:84:cc:3c:5d:6f:e0:31:f8:6e:4f:3b:
d7:3c:4e:a2:1c:9a:66:32:e7:4c:7a:e2:ec:ae:0d:
b3:3a:88:4d:ac:6a:75:8b:8a:f6:49:97:c8:1f:c7:
db:4a:8e:99:e2:d5:d9:1a:ac:b0:d2:c2:ca:63:3b:
6e:0b:db:1b:19:74:b8:32:83:64:38:b1:8c:49:a4:
62:7a:b6:80:50:d3:9d:cd:0f:e9:8d:4a:a6:f2:6a:
1f:47:26:33:a3:07:32:2b:63:e2:35:03:f5:23:9d:
54:7f:32:48:6c:59:be:c0:a2:bf:98:51:de:53:28:
8c:32:5d:75:7a:07:39:02:59:2e:f6:a5:b6:61:37:
69:89:17:c8:4a:22:75:91:84:db:18:4a:2b:be:ef:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:78:74:9A:4A:20:E7:FF:0A:31:FE:00:39:30:6C:59:C2:F7:28
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:39:78:4b:01:fa:05:5f:f3:26:30:49:fd:db:7c:ea:5b:85:
1f:3f:f6:cd:63:80:81:9f:0f:ae:cf:cf:0c:ac:73:a3:9f:e2:
d8:4e:98:cc:93:3e:ea:e7:62:ef:af:dd:85:9f:5a:0a:45:8b:
e1:ac:d4:1f:95:97:3b:88:39:33:75:36:94:b5:ff:97:c8:34:
c2:44:44:b1:2a:3e:37:2b:68:13:10:c1:2f:24:76:c4:56:12:
b0:f7:4f:09:73:3b:88:bc:6b:d6:56:2d:a1:1c:12:1b:48:68:
b3:23:11:06:5c:e9:50:2c:84:0a:3c:37:a4:ed:66:73:92:69:
40:51:4d:48:16:28:47:d2:d6:37:7a:2a:bc:6f:95:a4:97:af:
07:fe:ae:de:0d:96:05:2d:88:92:e7:70:fd:d5:ce:84:29:f1:
65:27:96:9f:d1:29:eb:f9:ff:79:7d:28:71:4e:db:5e:48:83:
67:b3:a2:17:b4:71:8a:cd:c4:59:2d:3c:42:84:be:31:a6:01:
bb:61:07:70:a0:60:28:bc:55:c3:c4:5c:2b:9f:60:c5:d4:eb:
64:64:b8:9b:44:4c:66:81:44:6d:33:11:9c:4c:24:28:fd:a7:
81:df:bb:26:8d:5c:13:35:1e:c7:89:83:54:b7:15:64:dc:e2:
96:4f:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:43:18 2025 by rpki-client